tag

Linux-Kernel

Linux XFRM nat_keepalive Double-Free LPE (CVE-2026-72137)

CVE-2026-72137 binary Unverified

CVE-2026-72137binaryHIGH 7.8Unverified2026-09-04Linux SCTP Stream Rollback UAF LPE (CVE-2026-52929)

CVE-2026-52929 binary Unverified

CVE-2026-52929binaryHIGH 7.8Unverified2026-09-04Linux SCTP Stale COOKIE-ECHO UAF LPE (CVE-2026-52924)

CVE-2026-52924 binary Unverified

CVE-2026-52924binaryCRITICAL 9.8Unverified2026-09-04Linux SCTP auth_enable Sysctl UAF LPE (CVE-2026-68162)

CVE-2026-68162 binary Unverified

CVE-2026-68162binaryHIGH 7.8Unverified2026-09-04Linux Open vSwitch Tunnel Netdev UAF LPE (CVE-2026-31678)

CVE-2026-31678 binary Unverified

CVE-2026-31678binaryHIGH 7.8Unverified2026-09-04Linux Netfilter nf_queue Bridge Device UAF LPE (CVE-2026-72255)

CVE-2026-72255 binary Unverified

CVE-2026-72255binaryHIGH 7.8Unverified2026-09-04Linux IPVS One-Packet Flag Propagation UAF LPE (CVE-2026-80714)

CVE-2026-80714 binary Unverified

CVE-2026-80714binaryCRITICAL 9.8Unverified2026-09-04Linux IPv6 fib6 Rule Suppression UAF LPE (CVE-2026-74581)

CVE-2026-74581 binary Unverified

CVE-2026-74581binaryHIGH 7.8Unverified2026-09-04Linux io_uring Poll Signed Comparison LPE (CVE-2026-52933)

CVE-2026-52933 binary Unverified

CVE-2026-52933binaryHIGH 7.8Unverified2026-09-04Linux Bridge Fast-Leave Port Deletion UAF LPE (CVE-2026-74480)

CVE-2026-74480 binary Unverified

CVE-2026-74480binaryCRITICAL 9.8Unverified2026-09-04Linux Netfilter xt_IDLETIMER UAF LPE (CVE-2026-23274)

CVE-2026-23274 binary Unverified

CVE-2026-23274binaryHIGH 7.8Unverified2026-09-03Linux Netfilter nf_queue UAF LPE (CVE-2026-52912)

CVE-2026-52912 binary Unverified

CVE-2026-52912binaryHIGH 7.8Unverified2026-09-03Linux MPLS Subsystem UAF LPE (CVE-2026-43042)

CVE-2026-43042 binary Unverified

CVE-2026-43042binaryHIGH 7.1Unverified2026-09-03Linux Kernel posix-cpu-timers Use-After-Free LPE (CVE-2026-64560)

CVE-2026-64560 binary Unverified

CVE-2026-64560binaryHIGH 7.8Unverified2026-09-03Linux Kernel IPC msg_msg Use-After-Free LPE (CVE-2026-52923)

CVE-2026-52923 binary Unverified

CVE-2026-52923binaryHIGH 7.8Unverified2026-09-03Linux Kernel eventpoll Use-After-Free LPE (CVE-2026-43074)

CVE-2026-43074 binary Unverified

CVE-2026-43074binaryHIGH 7.8Unverified2026-09-03Linux IPv6 RPL Routing UAF LPE (CVE-2026-43501)

CVE-2026-43501 binary Unverified

CVE-2026-43501binaryCRITICAL 9.8Unverified2026-09-03Zapscape — KVM/x86 Shadow-MMU Recursive-Zap Guest-to-Host Escape (CVE-2026-64561)

CVE-2026-64561 binary Patched

CVE-2026-64561binaryHIGH 8.8Patched2026-08-09ITScape — KVM/arm64 vGIC-ITS Guest-to-Host VM Escape (CVE-2026-46316)

CVE-2026-46316 (GHSA-qcxh-2cm7-9fcc) binary Patched

CVE-2026-46316binaryCRITICAL 9.3Patched2026-07-27Linux Kernel rtmutex Priority-Inheritance Stack-UAF — "GhostLock" (CVE-2026-43499, Nebula Security weaponized variant)

CVE-2026-43499 (aka "GhostLock") binary Patched

CVE-2026-43499binaryHIGH 7.8Patched2026-07-08PinTheft: RDS zcopy Refcount-Steal Double-Free LPE — Pure NASM Rewrite (CVE-2026-43494)

CVE-2026-43494 binary Patched

CVE-2026-43494binaryHIGHPatched2026-07-05Linux Kernel PPP Unprivileged User-Namespace Precondition Probe — CVE-2026-53075

CVE-2026-53075 binary Patched

CVE-2026-53075binaryINFOPatched2026-07-05Linux Kernel mm/mseal VMA-Merge Stale-Bound Bug (CVE-2026-23416)

CVE-2026-23416 binary Patched

CVE-2026-23416binaryMEDIUMPatched2026-07-05Linux Kernel KFENCE Cross-Cache Free of SKB Head via bpf_prog_test_run_skb — CVE-2026-31429

CVE-2026-31429 binary Patched

CVE-2026-31429binaryMEDIUMPatched2026-07-05Linux Kernel ICMP Fragmentation-Needed NULL Pointer Dereference (CVE-2026-23398)

CVE-2026-23398 network Patched

CVE-2026-23398networkHIGHPatched2026-07-05Linux Kernel Futex-PI rtmutex remove_waiter() Use-After-Free (CVE-2026-43499)

CVE-2026-43499 binary Patched

CVE-2026-43499binaryHIGH 7.8Patched2026-07-05Linux FUSE Readdir Cache Out-of-Bounds Write to Root LPE — CVE-2026-31694

CVE-2026-31694 binary Patched

CVE-2026-31694binaryHIGHPatched2026-07-05Linux BPF Verifier Scalar-Forking Soundness Bug to Container Escape — CVE-2026-31413

CVE-2026-31413 binary Patched

CVE-2026-31413binaryCRITICALPatched2026-07-05KVM SEV-SNP Page State Change (PSC) Heap Out-of-Bounds — CVE-2026-53360

CVE-2026-53360 binary Patched

CVE-2026-53360binaryHIGHPatched2026-07-05DirtyDecrypt-Go — RxRPC rxgk Page-Cache Overwrite LPE (Go Port) — CVE-2026-31635

CVE-2026-31635 binary Patched

CVE-2026-31635binaryHIGHPatched2026-07-05Linux Kernel act_pedit Partial COW Page-Cache LPE (CVE-2026-46331)

CVE-2026-46331 binary Patched

CVE-2026-46331binaryHIGH 7.8Patched2026-06-30DirtyClone — Linux Kernel LPE via Cloned Packet Page-Cache Overwrite (CVE-2026-43503)

CVE-2026-43503 binary Patched

CVE-2026-43503binaryHIGH 8.8Patched2026-06-28ssh-keysign-pwn: pidfd_getfd FD Theft via mm-NULL Exit Window (CVE-2026-46333)

CVE-2026-46333 binary Patched

CVE-2026-46333binaryHIGHPatched2026-06-05PinTheft: RDS Double-Free → LPE

binary Unverified

—binaryHIGHUnverified2026-05-20DirtyDecrypt / DirtyCBC — rxgk Page-Cache Write (Dirty Pipe Variant)

N/A (reported as duplicate by kernel maintainers; patched on mainline) binary Unverified

N/AbinaryHIGHUnverified2026-05-18Linux vsock Use-After-Free VM Escape (CVE-2025-21756)

CVE-2025-21756 binary Patched

CVE-2025-21756binaryHIGH 7.8Patched2026-05-17Linux nf_tables Use-After-Free Local Privilege Escalation (CVE-2024-1086) KEV RW EPSS 28%

CVE-2024-1086 binary Patched

CVE-2024-1086binaryHIGH 7.8Patched2026-05-17Copy Fail Linux Kernel Local Privilege Escalation (CVE-2026-31431) KEV EPSS 100%

CVE-2026-31431 binary Patched

CVE-2026-31431binaryHIGHPatched2026-05-17Dirty Frag: Linux XFRM/RxRPC Page Cache Write Chain LPE EPSS 93%

CVE-2026-43500, CVE-2026-43284 binary Patched

CVE-2026-43500, CVE-2026-43284binaryCRITICAL 7.8Patched2026-05-14